Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
File: 3zt208DGDWY1BqJSZxxSjjQ5_3U.mft (raw, json)
Hash identifier: 4rVr9TYV4CsOtSQeS4pmzxs1KYfVEON10RRLgRm8eVA=
Subject key identifier: 1E:16:68:D8:4C:4B:E2:AE:49:31:7B:3B:20:7F:2E:A8:88:F7:B7:A8
Authority key identifier: DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
Certificate issuer: /CN=df3b76d3c0c60d663506a252671c528e3439ff75
Certificate serial: 019771BF3ACDDF25EB8D5D969B5EC6AFA364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
Manifest number: 1532
Signing time: Sun 15 Jun 2025 04:00:47 +0000
Manifest this update: Sun 15 Jun 2025 04:00:47 +0000
Manifest next update: Mon 16 Jun 2025 04:00:47 +0000
Files and hashes: 1: 3zt208DGDWY1BqJSZxxSjjQ5_3U.crl (hash: bBPbij8KTED9pFsAdV9wV/OayZOTwBohXTlqMV2Fx6Q=)
2: MSp6uSJniwR1tjfPjmXw8Wg_0YU.roa (hash: 0fQ4kAnNMwAWjVPJbNDfudzXYDSGRSTHXnaddIlGIe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:3a:cd:df:25:eb:8d:5d:96:9b:5e:c6:af:a3:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b76d3c0c60d663506a252671c528e3439ff75
Validity
Not Before: Jun 15 04:00:47 2025 GMT
Not After : Jun 16 04:00:47 2025 GMT
Subject: CN=1e1668d84c4be2ae49317b3b207f2ea888f7b7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:12:f1:db:c8:e2:ec:b6:fc:3c:82:7f:a0:42:
51:a1:84:d4:b9:bf:59:66:49:8d:95:77:10:23:99:
59:76:b3:14:2a:74:09:b7:9b:f3:e0:91:f8:9e:d7:
2f:e2:25:ae:6e:2d:94:7d:57:15:53:2e:38:59:1d:
e2:75:da:ab:77:8d:36:c6:a6:ea:31:a2:10:e2:fb:
a0:6a:e3:f6:0b:b7:9c:17:31:28:f8:01:25:a3:c8:
e6:77:d1:99:fc:47:03:3d:85:be:16:48:8d:4b:b0:
2d:84:2a:5f:20:3a:ad:89:17:6f:26:65:09:78:39:
00:55:80:49:f2:1a:6a:7d:fd:20:71:88:85:50:d7:
a6:84:94:26:59:4c:7c:64:b6:67:ad:7c:76:d5:71:
98:d6:05:35:3c:7d:a7:69:08:f7:19:0f:06:7e:31:
04:8a:8e:7a:bf:36:bc:fa:a2:44:1b:90:ff:6c:e6:
e5:68:01:f6:17:cf:aa:d2:f1:f6:13:c8:8a:83:07:
37:ac:0c:fc:cc:12:96:ac:b9:35:a3:ec:a1:8b:79:
67:99:92:9a:e8:41:23:2f:71:70:db:d7:d2:c6:0b:
be:d7:53:1a:14:d7:93:b8:0c:49:2b:9c:c2:bc:46:
cc:cc:97:32:d4:c7:69:13:76:81:2d:f3:3c:69:6e:
40:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:16:68:D8:4C:4B:E2:AE:49:31:7B:3B:20:7F:2E:A8:88:F7:B7:A8
X509v3 Authority Key Identifier:
keyid:DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:a7:0e:57:75:ea:fa:58:41:f2:be:d0:53:ac:50:42:51:32:
d3:d1:5e:c8:ad:c6:72:92:2f:61:ea:f3:c5:97:98:69:91:ca:
77:e6:11:22:af:32:56:bf:b0:54:4d:d5:80:4b:ce:62:4f:09:
c3:16:6b:50:20:b5:01:38:f9:4c:09:af:37:0a:8e:bf:0b:75:
0c:08:0e:f2:4c:8e:18:d7:2e:d3:d9:d2:ed:48:d0:4e:09:0b:
cf:67:1c:7d:61:46:04:70:8c:a0:49:3c:97:22:21:34:75:7c:
ec:4f:fa:46:0d:ea:4c:05:91:47:95:fe:65:12:97:9b:05:54:
80:c6:ac:cc:6d:2b:4e:35:a2:cc:85:ff:f4:07:d1:76:f3:22:
de:eb:1d:8a:83:63:b2:7f:65:73:56:35:ba:84:4f:b8:68:73:
08:66:81:4a:a5:a9:f7:ee:06:e2:d6:e5:ef:98:27:24:3a:f8:
1a:df:df:c0:ba:e8:19:26:a0:0e:bc:9f:44:d0:2b:76:8f:ab:
9d:d3:a1:48:99:c2:ea:05:ad:3f:f1:9d:3b:0b:f5:25:ca:18:
df:c0:69:f6:a8:6c:75:0a:bd:5b:1e:e8:da:9d:d3:dd:88:f0:
e9:4e:2e:2e:73:1b:0d:7b:27:22:ea:a1:cb:a4:a5:a0:99:83:
fe:f9:65:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:35:12 2025 by rpki-client